I run a saas and we get this every now and then.

As a rule of thumb, when you get a chargeback you need to completely ban the customer from your db. This includes:

- card ban - email address ban - fingerprint their access and ban

This will save you a lot of hassle when they try to signup/buy your product again and cause you the same amount of grief.

▲

epa 5 hours ago | parent | next [-]

Exploiters easily get around this. its a small group of people doing all of the abuse.

▲

Cider9986 5 hours ago | parent | prev | next [-]

All 3 of those identifiers can be easily changed by advanced users. I'm curious what you mean by fingerprint their access. Is this like an on demand fingerprinting, I've only seen browser fingerprinting as a tracker for every user.

▲

imp0cat 2 hours ago | parent [-]

Nice try, chargebacker! ;)

	▲	Cider9986 2 hours ago \| parent [-]
		I try to pay with Monero, so I can't chargeback :)

▲

wahnfrieden 6 hours ago | parent | prev | next [-]

Use DeviceCheck if iOS app too. Uber does this to ban across accounts

	▲	Cider9986 5 hours ago \| parent [-]
		I imagine most fraudsters wouldn't be using iOS. I'm curious if the android app fingerprinting solutions go cross user profile.

▲

shawnz 5 hours ago | parent | prev [-]

You'd better be promptly responsive to legitimate customer support inquiries if you are going to have a policy like that